CVE-2017-13181

CVE-2017-13181: vulnerability in Google Inc. Android

Published · Updated

Follow this CVE+ Monitor Android

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67864232.
Affected products
Google Inc. · Android
Related CVEs — Google Inc. Android

In the same product, most dangerous first.

CVE-2017-0561—CVE-2017-0561EPSS 29.8%CVE-2017-0781—CVE-2017-0781EPSS 21.5%CVE-2017-13156—CVE-2017-13156EPSS 20.5%CVE-2017-0785—CVE-2017-0785EPSS 12.4%CVE-2016-10277—CVE-2016-10277EPSS 9.8%CVE-2017-13208—CVE-2017-13208EPSS 8.5%